R6 LUNA.rar
- SHA256 43f1ffd8f39e9de7db54a54e08726882daa29aa5377a6b3aa3bff5858c02cce3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
R6 LUNA.rar
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
900 seconds
General
- Target R6 LUNA.rar
- Size 138KB
- Sample261107-vrrk4sdv41
- SHA256 43f1ffd8f39e9de7db54a54e08726882daa29aa5377a6b3aa3bff5858c02cce3
- MD5 9d1f07b2bc38b5b153c104a80113d762
- SHA1 59b3246a7a817465bf1d6a48f4a81776cdd2d019
- SHA512 68775b77c1b8717a27cc8117143227d00e6a16b5a3f2025d4d29fbe624abaed724ec88969b732b1c68b593cd8e59e8d5e562f8a93fe9f4226b9670808b9fa78f
- SSDEEP 3072:6moXZgnkPhP9lIJw8xhgqSsojMdYkeyEykMO:6rancUMqSsmMdYkK
- TLSH T1E7D31213F1FFECDBFCFD41859B403058527DAAF710E4106666E491525BE2F922B72898
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/R6 LUNA/luna-r6.exe unpack001/R6 LUNA/module.dll
File Explorer
-
R6 LUNA.rar.rar 138KB
-
R6 LUNA/luna-r6.exe.exe 266KB
-
R6 LUNA/module.dll.dll 109KB
-
R6 LUNA/read_me.txt152B
R6 LUNA/luna-r6.exe
- IMPHASH 878aea52cc9c61bfdec6e08a97efcf4e
- SHA256 dee88ffa2adc7f18120ba421d7dd1ccbc839b8abb7be1abb9c34ba6914c477d6
- MD5 504caf81a99e06b9727ebca0405b829a
- SHA1 281b94d05fa1a702369ed3d44bd957af9151e457
- SHA512 a0878d54616f970f8f8f149745391023ccd8fc40c1f1d95fc0a53eac6a82de0987db913cacb6d575b8a5a713fe3deb631d555977b0aa20afa0cb2c3b89126cdf
- SSDEEP 6144:DSiRDTydPhvmOopuIf6WoVydEcm5iJiYx1eNee:XEc/xe
- TLSH T1CF445C05B1E52AFEE667C03ED9160906DA717C464399CEFB03D09A720E6B9D0DE3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
111696
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetDriveTypeA
GetACP
GetLastError
WideCharToMultiByte
WriteConsoleW
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
GetStdHandle
WriteFile
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
VirtualProtect
LoadLibraryExW
LCMapStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileType
SetStdHandle
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
Name
.text
Size
168KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1.6945204e+07, id=260, version=36219,
count=1.7010536e+07, id=1, version=36916,
count=71, id=261, version=36712,
count=109, id=258, version=36916,
count=136, id=261, version=36219,
count=1.7076276e+07, id=258, version=36712,
count=102248, id=259, version=36219,
count=1.7010043e+07, id=259, version=36712,
count=1.701074e+07, id=261, version=36712,
count=18, version=40,
count=1.7010043e+07, id=260, version=36916,
count=1.7075579e+07, id=260, version=36916,
R6 LUNA/module.dll
- IMPHASH ab95fbdb7547bc54a7586bb3114596ea
- SHA256 66c570500f1a53d44caaf7ce3b70cce0caf9c263c99254ef28ab9e3efc3899e5
- MD5 ead05ea695023f81e106479bb7bda995
- SHA1 5663773e6eae1628d5b1c2616a5d426d689d98d5
- SHA512 5613ef0a13931494044b7725b4926e8e10069fd42922ba2c4b41289ebf5235ac0829e0e823ea69f4cf5f778cb5a19aefa7aa036515f1595cb49056b7998bf0f9
- SSDEEP 1536:zvOd2DgYSsPSF0olcBjd0p2fFOiJcQDpjxZT6/8n1k2Op3e5yjI:zvOMkbUSoiQtHm/8n1o6yk
- TLSH T185B3D60635EC95F9E0A9B478B8767207763634480E6486EF0BD045192FF7B649EE3B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
94688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\projects\arc_raiders\x64\Release\arc_raiders.pdb
kernel32
GetModuleHandleA
DisableThreadLibraryCalls
Beep
GetProcAddress
GetTickCount
VirtualQuery
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlCaptureContext
InitializeSListHead
user32
GetAsyncKeyState
GetSystemMetrics
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
memset
__std_exception_destroy
__std_type_info_destroy_list
__std_exception_copy
memcpy
__C_specific_handler
memmove
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-math-l1-1-0
atan2
sqrtf
expf
sin
sqrt
cos
cosf
sinf
Name
.text
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=19, id=261, version=34321,
count=6, id=257, version=34321,
count=5, id=257, version=33145,
count=63, id=1, productName=Unmarked objects,
count=3, id=265, version=34810,
count=2, id=259, version=34810,
count=1, id=255, version=34810,
count=1, id=258, version=34810,
R6 LUNA/read_me.txt
- SHA256 18b07368cb4257b92b3ee7889d08acff28fa0d5f5f1a6e09b00f2e580f3d6666
- MD5 561c677cc63ce54bab6bd787e8216080
- SHA1 f0a112f24146979bc78aaaca2636a50011e02671
- SHA512 98120f5f63144bd8f5b780c869111cddd116d2a2ab3181c2b0ccd50b408cc6217caf6468a4e9454ca32b10024dda9eb3f8850a886d7bf0023d7dc9e4987463b6
- TLSH T109C08CCB98AB2C61ABA9A8CC72319978A868C298EC6139420110830E456EE60584A846
- MD5 SHA1 SHA512 TLSH